Bump lightgbm from 4.5.0 to 4.6.0 in /numerai/examples/signals-python3 - #105
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [lightgbm](https://github.com/lightgbm-org/LightGBM) from 4.5.0 to 4.6.0. - [Release notes](https://github.com/lightgbm-org/LightGBM/releases) - [Commits](lightgbm-org/LightGBM@v4.5.0...v4.6.0) --- updated-dependencies: - dependency-name: lightgbm dependency-version: 4.6.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
Looks good, straightforward dependency version bump.
What was reviewed: the single-line change bumping lightgbm from 4.5.0 to 4.6.0 in numerai/examples/signals-python3/requirements.txt. Checked lightgbm's 4.6.0 release notes for breaking changes affecting this example - the listed breaking changes are R-package, scikit-learn subclassing, and column-major array handling, none of which affect this basic train/predict usage. Considered pickle/joblib model compatibility across the version bump - this only affects existing users' saved models, not correctness of this repo's code.
Extended reasoning...
Single-line dependabot version bump in an example requirements.txt, no source code or logic changes. No security-sensitive surface (auth, crypto, permissions) is touched. Change is simple and mechanical, matching the approval guideline for version bumps.
Bumps lightgbm from 4.5.0 to 4.6.0.
Release notes
Sourced from lightgbm's releases.
... (truncated)
Commits
d02a01arelease v4.6.0 (#6796)d24260f[R-package] require lgb.Dataset, remove support for passing 'colnames' and 'c...c6d90bc[python-package] support sub-classing scikit-learn estimators (#6783)768f642[c++] update to fmt 11.1.2, fast_double_parser 0.8.0 (#6802)1531d87[ci] fix valgrind workflow (#6816)188f1be[ci] validate pyproject file by json schema (#6813)81922a7[ci] [python-package] update pre-commit hooks to latest versions (#6817)2db0b25[python-package] Separately check whetherpyarrowandcffiare installed ...c9de57b[CUDA] fix setting of CUDA architectures and enable support for NVIDIA Blackw...f2b959c[ci]: Bump release-drafter/release-drafter from 6.0.0 to 6.1.0 in the ci-depe...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.